bundle update
weird dependency change with bcrypt